Gentoo Archives: gentoo-user

From: John Jolet <john@×××××.net>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] POSTFIX and SASL
Date: Wed, 05 Oct 2005 15:31:26
Message-Id: 200510051025.33087.john@jolet.net
In Reply to: [gentoo-user] POSTFIX and SASL by Joe Strusz
1 On Wednesday 05 October 2005 10:17, Joe Strusz wrote:
2 > Ive read every forum on the site, and even ventured over the Wiki for
3 > even more redundant reading. Ive read the entire postfix handbook,
4 > and still have not found an answer to this problem. Its been two
5 > weeks now I haven't been able to send mail from outside the network
6 > to non local users.
7 >
8 > Heres my /etc/postfix/main.cf:
9 >
10 is it just me, or do you not have the line: smtpd_sasl_auth_enable = yes
11 in here anywhere?
12 > alias_database = hash:/etc/mail/aliases
13 > alias_maps = hash:/etc/mail/aliases
14 > biff = no
15 > broken_sasl_auth_clients = yes
16 > command_directory = /usr/sbin
17 > config_directory = /etc/postfix
18 > content_filter = smtp-amavis:[127.0.0.1]:10024
19 > daemon_directory = /usr/lib/postfix
20 > debug_peer_level = 2
21 > default_destination_concurrency_limit = 2
22 > empty_address_recipient = MAILER-DAEMON
23 > home_mailbox = .maildir/
24 > html_directory = no
25 > inet_interfaces = all
26 > local_destination_concurrency_limit = 2
27 > mail_owner = postfix
28 > mailq_path = /usr/bin/mailq
29 > manpage_directory = /usr/share/man
30 > mydestination = op, op.$mydomain, $mydomain
31 > mydomain = mydomain.com
32 > myhostname = op.mydomain.com
33 > mynetworks = 192.168.1.0/24, 127.0.0.0/8, *.*.*.*(my WAN ip)
34 > newaliases_path = /usr/bin/newaliases
35 > queue_directory = /var/spool/postfix
36 > queue_minfree = 120000000
37 > readme_directory = /usr/share/doc/postfix-2.1.5-r2/readme
38 > sample_directory = /etc/postfix
39 > sendmail_path = /usr/sbin/sendmail
40 > setgid_group = postdrop
41 > smtp_use_tls = yes
42 > smtpd_data_restrictions = reject_unauth_pipelining
43 > smtpd_sasl_auth_enable = yes
44 > smtpd_sasl_local_domain =
45 > smtpd_sasl_security_options = noanonymous
46 > smtpd_tls_CAfile = /etc/ssl/postfix/server.pem
47 > smtpd_tls_cert_file = /etc/ssl/postfix/server.crt
48 > smtpd_tls_key_file = /etc/ssl/postfix/server.key
49 > smtpd_tls_loglevel = 3
50 > smtpd_tls_received_header = yes
51 > smtpd_tls_session_cache_timeout = 3600s
52 > smtpd_use_tls = yes
53 > tls_random_source = dev:/dev/urandom
54 > unknown_local_recipient_reject_code = 450
55 > virtual_alias_domains = myvirtual.com
56 > virtual_alias_maps = hash:/etc/postfix/virtual
57 >
58 >
59 > And heres /etc/sasl2/smtpd.conf:
60 >
61 > pwcheck_method: saslauthd
62 > mech_list: plain login
63 >
64 > And heres /etc/conf.d/saslauthd:
65 >
66 > # $Id: saslauthd.sysconfig,v 1.1 2001/05/02 10:55:48 wiget Exp $
67 > # Authentications mechanism (for list see saslauthd -v)
68 > SASL_AUTHMECH=pam
69 >
70 >
71 > # Hostname for remote IMAP server (if rimap auth mech is used)
72 > # Ldap configuration file (if ldap auth mech is used)
73 > SASL_MECH_OPTIONS=
74 >
75 >
76 > # Extra options (for list see saslauthd -h)
77 > SASLAUTHD_OPTS=
78 >
79 >
80 > And last but not least, heres a description of the problem...
81 >
82 > TLS and everything else works great. However as soon as I check that
83 > little box in outlook express that says "my smtp server requires
84 > authentication" on the client whom worsk out of the office on home
85 > internet lines.. the password box keeps reappearing, and accepting
86 > any passwords... i ran the line "saslpasswd2 -c username" to no
87 > avail. Same issue.
88 >
89 > Postfix was compiled with SASL support:
90 >
91 > [ebuild R ] mail-mta/postfix-2.1.5-r2 -ipv6 -ldap -mailwrapper
92 > -mbox +mysql +pam -postgres +sasl (-selinux) +ssl -vda 0 kB
93 >
94 > And when i telnet to 25 and issue the ehlo command, i do get AUTH
95 > PLAIN lines...
96 >
97 > whats going on?
98 >
99 > please help
100 >
101 > im racking my brains.
102 >
103 >
104 >
105 >
106 > Joe Strusz
107 >
108 > IT Assistant
109 > Oxford Publishing, Inc.
110 > 307 West Jackson Avenue
111 > Oxford, MS 38655-2154
112 > 800-247-3881
113 > 662-236-5510x40
114 > jstrusz@×××××.com
115 > http://www.nightclub.com
116
117 --
118 John Jolet
119 Your On-Demand IT Department
120 512-762-0729
121 www.jolet.net
122 john@×××××.net
123 --
124 gentoo-user@g.o mailing list